Abstract: Remote installation of an application program is provided via a configuration of the application program corresponding to a particular user of the local application. The configuration is defined and stored on a remote server. In response to a user request, a determination is made that the stored configuration corresponds to the requesting user, the user is authenticated, and data is downloaded from the remote server according to the stored configuration. This stored configuration is also encrypted and stored in a manifest file which is also downloaded. Responsive to the user authentication, the manifest file is decrypted, and the application program is constructed pursuant to the configuration decrypted from the manifest file.

Abstract: A method is disclosed for a system including at least one process management computer and a number of field devices, whereby status and control signals are transmitted between at least some of the field devices and the process management computer using a TCP/IP protocol over a communication channel, preferably a radio connection and/or the Internet. A process management system includes a process management computer with a web-server, a client computer with an Internet browser and a number of sensors and actuators. The process management system may preferably be operated by way of the Internet, using the client computer.

Abstract: A method and apparatus for adaptive and dynamic filtering of threaded programs. An embodiment of a method comprises analyzing the operation of a computer program, the computer program comprising a plurality of program threads; tracking overhead for the computer program; observing program events for the computer program; rationing overhead between program threads in inter-thread program events; and filtering program events based on a dynamic threshold.

Abstract: Information processing apparatus, including occurrence number counter counting events that occurred in each of a plurality of CPUs. Apparatus performs functions of; storing accumulated occurrence number of events, which occurred while the thread is being executed by each of the CPUs, in a thread storage area of the thread associating accumulated occurrence number with CPU; storing, in the thread storage area, a value of occurrence number counter of the CPU, the value having been counted before the thread is resumed by the CPU; and adding, to accumulated occurrence number which has been stored in accumulated number storing unit while corresponding to the CPU, a difference value obtained by subtracting a counter value, which has been stored in the start-time number storing unit of the thread, from a counter value of the occurrence number counter of the CPU, in a case where the CPU terminates an execution of the thread.

Abstract: The present invention provides a method to resolve ambiguities for monitoring and automating UNIX processes by providing a multi-level filter routine and search approach that interrogates the active process table to identify the specific process by matching unique process criteria stored during configuration of the automation product. The filter and search method goes beyond process name, as process names are often not unique in UNIX environments, and includes process parameters and information by which the process was invoked.

Abstract: A DLI call from the batch application is intercepted, wherein the DLI call is made for the purpose of accessing a hierarchical database. It is then determined if the access to the hierarchical database is a checkpoint trigger event. A segment counter for a trigger segment in a checkpoint trigger for the checkpoint trigger event is incremented if the trigger segment is identified by the DLI call. The segment counter is compared to a segment commit threshold in the checkpoint trigger and commit point processing is performed on behalf of the batch application if the segment counter is in a predetermined relation to the segment commit threshold.

Abstract: By exploiting an early release facility that may be provided by certain transactional memory designs, we allow for transaction software constructs that wait on removal (or satisfaction) of a condition that would otherwise result in transaction abort. Absent exploitation of such a such a facility, the act of checking the condition would typically introduce a corresponding location into the read set of the transaction, and a subsequent modification of that location that removed (or satisfied) the condition, would result in abortion of the blocked transaction. By exploiting an early release facility such as described herein, a transaction may release the location (or locations) corresponding the condition, retry, and once the transient condition is removed (or satisfied), complete and commit. In this way, computation effort may be conserved while still employing a conceptually simple and convenient coordination facility.

Abstract: Transforming one or more of a collection of electronic data interchange (EDI) transactions. A type of EDI transactions is identified to be transformed from a source format to a destination format. The collection of the EDI transactions is received according to the source format. A particular one or more of the collection of the EDI transactions is identified corresponding to the identified type of EDI transactions. A transformation map is defined to transform the identified particular one or more of the transactions from the source format to the destination format. The identified particular one or more transactions is transformed according to the defined transformation map.

Abstract: A system and method for scheduling and managing computer applications is provided. In one embodiment, an event processor dispatches messages to run a job to an agent module residing on a local or remote node. The agent module, upon receiving the messages, spawns processes to run the job, returning status notifications of the running job to the event processor.

Abstract: Incoming work units (e.g., requests) in a computing workload are analyzed and classified according to predicted execution. Preferred embodiments track which instrumented wait points are encountered by the executing work units, and this information is analyzed to dynamically and autonomically create one or more recognizers to programmatically recognize similar, subsequently-received work units. When a work unit is recognized, its execution behavior is then predicted. Execution resources are then allocated to the work units in view of these predictions. The recognizers may be autonomically evaluated or tuned, thereby adjusting to changing workload characteristics. The disclosed techniques may be used advantageously in application servers, message-processing software, and so forth.

Abstract: An approach for allocating resources to an apparatus based on preemptable resource requirements generally involves a resource allocator determining that a resource that satisfies a resource requirement for one apparatus is not available but that another resource that currently satisfies another resource requirement for another apparatus does satisfy the resource requirement. The resource allocator determines that the other resource requirement for the other apparatus is characterized in that resources that currently satisfy the other resource requirement may be de-allocated from the other apparatus, such as a preemptable resource requirement. The resource allocator de-allocates the resource from the other apparatus and allocates the resource to the one apparatus. A preemptable resource requirement can be based on a suspendable resource requirement or a set of alternative resource requirements.

Abstract: A method for facilitating network communications from one or more independent execution threads by a dedicated worker thread. Because an operating system is not designed for use with a large number of threads, such a system requires the use of multiple computers for simulating a large number of virtual users. This increases complexity, as well as cost. The present invention reduces the number of threads needed, which reduces resource needs, and in turn increases the number of virtual users that can be simulated. According to the present invention, a worker thread uses non-blocking function calls to efficiently handle requests for network operations.

Abstract: Systems, methods, and computer-readable media of enrolling conferees to receive conferencing services. Methods to achieve the foregoing can comprise: receiving a request from the conference call host to enroll in conferencing services; receiving data representing a unique identifier relating to the conference call host; providing data representing access information to the enrolled conference call host, wherein the given conference call host can request access to a given conference call using the access information; and configuring a component of a system related to supporting the conference call to connect the conference call host directly to the conference call in response to recognition of the access information of and the unique identifier in a communication from the conference call host.

Abstract: A method of trapping a logout event includes receiving an HTTP request, checking if a URI of the HTTP request matches an entry in a first map, looking for an entry in a second map, checking for a logout parameter in a list of request query parameters, checking for a logout parameter in a header of the HTTP request, checking for a logout parameter in a body of the HTTP request, and triggering a logout event when the first of the entries or parameters if found. The method can be extended to call a logout handler and can be used in a wide range of web-based computing environments and in particular with policy/web/j2ee agents.

Abstract: Methods and apparatus, including computer program products, for monitoring and discovering process executions in a distributed computer system. A central system receives process data items that have been collected by an agent, identifies a process instance with which each process data item is associated, groups the process data items that are associated with a first process instance into a first group, and generates a reconstruction of the first process instance based on the process data items in the first group. The central system can further use the reconstructed first process instance to model a process. Additionally, the central system can further use the reconstructed first process instance to monitor a process instance.

Abstract: The present invention provides a virtual machine interface (VMI) and an application programming interface (API) usable in conjunction with a reconfigurable wireless network communication apparatus. The reconfigurable wireless network communication apparatus comprises a plurality of hardware kernels. The apparatus can be reconfigured to support different or modified communication protocols over time. The VMI comprises a library of software objects. By configuring VMI software objects, a programmer selects the communication protocol used by the reconfigurable wireless network communication apparatus. The API of the present invention provides higher level management of the communication protocol used by a reconfigurable wireless network communication apparatus. The API comprises a library of high level software objects that further abstract hardware details of the apparatus.

Abstract: An application program is run in a process supported by an operating system in a computer system. The application program is executed in a virtual machine, and the virtual machine is within the process. Loading a library for the application program includes determining whether this is the first library load instruction in the application program. If it is the first library load instruction, then the library is loaded in a first memory area, and a handle and link map to the first memory area is defined for the library. If the library load instruction is a second or subsequent library load instruction, the further library is loaded in a further memory area, also associated with the link map identifier, and a second handle to the further library is defined and stored.

Abstract: An automatic disk reproducing apparatus includes a chassis body, a duplicating device, a disk feeding device, a disk conveying device and a disk holder. The duplicating device is mounted in the chassis body and has a tray. The disk feeding device is mounted on the chassis body to hold a stack of compact disks in position and allows gravity to pull the compact disk at the bottom of the stack of compact disks into the tray for duplication. The disk conveying device includes two conveying members and two arms connected respectively to the conveying members to elevate the recorded compact disk from the tray after the duplication of the compact disk and convey the recorded compact disk to the disk holder.

Abstract: A first groove, a second groove, and a prepared hole are formed in a traverse chassis. The first groove restricts the downward movement of a printed circuit board as a lower edge portion of the board is slidably pinched in the first groove. The second groove restricts the sliding movement in one direction of the board as an edge portion on one side of both lateral sides of the board whose lower edge portion is nipped in the first groove is fitted in the second groove. The prepared hole vertically penetrates a portion of the traverse chassis defining the first groove and is disposed adjacent to an edge portion on another side of the both lateral sides of the board whose edge portion on the one side is fitted in the second groove.

Abstract: In this invention, an objective lens driving device, an optical pickup, and an optical disk device are disclosed which have a feature that plural dynamic vibration absorbers provided at the retaining section, by which the elastic supporting members supporting the movable section retaining the objective lens are connected to the movable section, can reduce a resonance peak, which may worsen the servo characteristic, and suppress unwanted vibration effectively, since the character frequency of the dynamic vibration absorbers functions as a damper against the vibration of the movable section. This invention also discloses a method of suppressing the vibration of the movable section.

Abstract: An image output system configured of information terminals, each of which includes an identification information storage unit which stores identification information for identifying each of the information terminals and a transmission unit which transmits the identification information, and an image output apparatus which includes: an identification information receiving unit which receives the identification information transmitted by each of the information terminals; an output unit which obtains image information which is information for outputting images, and outputs images based on the obtained image information; a judgment unit which judges whether or not plural pieces of identification received by the identification information receiving unit satisfy a predetermined condition; and an output control unit which controls the output unit based on the judgment made by the judgment unit.

Abstract: In certain embodiments, a method for generating fees using a receiving device, involves distributing censored video from a distributor video to a receiving device; and uncensoring the censored video using the receiving device upon payment of a fee. The receiving device uses overlay data received from the distributor to uncensor the censored video by overlaying the overlay data over the censored video using a video overlay frame to overlay a video frame containing the censored video data in accordance with boundaries determined by an alpha plane within the receiving device. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: Television system targeted advertising is described. In an embodiment, a content provider monitors a real-time state of television-based systems for a power on/off state and a tuning configuration. The content provider delivers advertising content to one or more of the television-based systems when they are powered-on and configured to receive the advertising content. The one or more television-based systems then receive the advertising content to display a targeted advertisement for viewing. The content provider records how many of the television-based systems receive the advertising content, and records how many of the television-based systems that receive the advertising content then display the targeted advertisement for viewing.

Abstract: An electronic program guide (EPG) having a variable indicator to focus a user's attention upon a corresponding field of a selectable program instance The EPG includes a user interface screen for providing a plurality of television program instances by time and channel in a grid menu. Each television program becomes selectable from the EPG based upon user interaction. The indicator is depicted in association with each television program when it becomes selectable as a result of user interaction. The indicator is configured based upon attributes of the currently selectable program instance.

Abstract: A user interface allows for blending of television program choices from which a viewer may select, the blending representing options for linear and non-linear programming presented together within a single hierarchy of a designated category. The blending may further include managed content relevant to the designated category, where desired. Such designated categories may include television programming categories and/or content categories. The options for linear and non-linear programming may be presented together within a single screen of the user interface.

Abstract: One embodiment of the present invention is a method for broadcasting information to a client device, which device utilizes presentation rates to present information at various presentation rates, and which method includes: (a) broadcasting information; and (b) broadcasting guidance information used to determine presentation rates for use by the client device in presentation of the information; wherein the guidance information comprises insistence information that specifies a measure of importance of utilizing presentation rate information contained in the guidance information.

Abstract: Delivery of feedback information to a scheduling service to determine optimum broadcast times based upon client platform tuner contention is described. A usage pattern of an electronic media device is recorded. The usage pattern is communicated to a scheduling server. Media content is received during a time period selected by the scheduling server based upon the usage pattern.

Abstract: Method and system for enabling users to perform self-service operations in interactive TV environments. In one embodiment, the method enables users to select and activate programming packages via a set-top box, thereby eliminating the need for the users to have to call a call center to activate the unit. Using a set of interactive screens, the user is enabled to view various programming package information, including comparative information. In one embodiment, the method assists users who are moving to activate/reactive broadcast services. For example, options are provided to enable the user to schedule service work, disconnect and activate services, and other activities connected with the move. In another embodiment, the method enables a user to select a programming package based on packages that are recommended by the system. Historic usage patterns, including viewing habits and attempts to access unavailable content are analyzed to determine which programming packages should be recommended for the user.

Abstract: In one embodiment, a method can include: (i) receiving a contact center interaction request via a device coupled to a display screen; (ii) accessing information about the device or a user of the device from a customer database of a content provider; and (iii) establishing an interaction path between the contact center and a viewer. The method can further include providing information to the user via the interaction path in response to a request by the user for the information. The device can be a set-top box (STB) or a cable card and the display screen can be a television, for example. Also, the content provider can be a cable or satellite television provider, for example.

Abstract: A method of distributing multimedia data from a central distribution station to local equipment including: linking one image characteristic (32, 34, 36, 38, 40, 42, 44, 46, 48) with at least one set of multimedia data stored by the central distribution station respectively; making available to at least one user of a support (10) having at least one selection image (12, 14, 16, 18, 20, 22) in response to the capture of at least one image of the support by the local equipment, and calculating a characteristic of the captured image; searching for a multimedia data set of the central station linked to the image characteristic closest to the characteristic calculated; transferring of the corresponding multimedia data to the local equipment.

Abstract: Provides methods and apparatus to reduce effects on playback of moving picture data caused by variations in data transmission rate that occur on a communication line, a receiving and playing back apparatus includes a receiver for receiving moving picture data transmitted over a communication line; playback modules for playing back the received moving picture data; buffer B for temporarily storing the moving picture data received by the receiver and outputting the stored moving picture data at a desired speed; and buffer A for providing the playback modules with moving picture data required for playback processing.

Abstract: According to one embodiment of the invention, a method for managing security for an organization is provided. The method includes receiving a plurality of requests from a plurality of parties. Each request is a request for permission to implement a deviation from a security rule. Each request includes a statement describing a benefit associated with the deviation. The method also includes determining a risk associated with the deviation. The method also includes deciding whether to approve each request based on the determined risk and the statement. The method also includes storing the requests and a status of each request. The status indicates whether the request is approved. The stored requests includes at least one approved request. The method also includes deciding, after a predetermined time period, whether to continue an approval of the approved request.

Abstract: A network security system is provided comprising a plurality of network bubbles wherein each bubble includes bubble members configured to transmit and receive data. Bubbles have network security policies that may be enforced by a plurality of network control point devices. The system further includes a private virtual backbone configured to interconnect the plurality of network control points connected to known bubbles. The privacy of the private virtual backbone is maintained by an inter-bubble device and/or set of two network control points. The inter-bubble device and set of control points enforce the network security policies of any connected bubble and relay data packets between address spaces. The private virtual backbone may operate in private address space. The system also includes an instance-specific virtual backbone that interconnects only bubble partitions from the same network bubble, thus simplifying the enforcement of a network security policy.

Abstract: An approach is provided for deleting electronic documents using a document retention policy that specifies one or more deletion criteria for documents belonging to each of a plurality of document classifications. The document retention policy is defined by document retention policy data that is managed by a document retention policy manager. The document retention policy manager disseminates the document retention policy data to network elements over a communications network. The document retention policy manager determines whether a retention policy audit should be performed and if so, signals the network elements to conduct a retention policy audit. The network elements are configured to conduct the retention policy audit by deleting electronic documents in accordance with the document retention policy. Automatic or manual loading or auto-destruction code may be used to handle deleting electronic documents from removable media.

Abstract: A method that includes initiating a network access request from an access requester on a platform that couples to a network, the network access request made to a policy decision point for the network. The method also includes establishing a secure communication channel over a communication link between the policy decision point and a policy enforcement point on the platform. Another secure communication channel is established over another communication link. The other communication link is between at least the policy enforcement point and a manageability engine resident on the platform. The manageability engine forwards posture information associated with the access requester via the other secure communication channel. The posture information is then forwarded to the policy decision point via the secure communication channel between the policy enforcement point and the policy decision point.

Abstract: A system and method are presented for authorizing execution of requested actions transmitted between clients and servers of a data processing system. The method includes receiving a message including a set of actions and simulating execution of the set of actions. A list representing allowable actions and user-definable inputs to the simulated actions is defined. The list of allowable actions and user-definable inputs to the allowable action is then compared to user-requested actions and inputs. When elements within the user-requested actions and inputs are included in the allowable actions and input list, the user-requested actions and inputs are authorized for execution.

Abstract: One aspect relates to a process and associated device for managing digital ID lifecycles for application programs, and abstracting application programs for multiple types of credentials through a common Digital Identity Management System (DIMS) and Application Programming Interface (API) layer.

Abstract: Disclosed are an authentication system and method thereof for a dial-up networking connection via a terminal. The authentication system includes a terminal for snooping an authentication request packet that includes an authentication ID and password of a computer requesting authentication, and for generating an acknowledge packet of the authentication request packet. The authentication method includes receiving an authentication request packet including an authentication ID and password by a terminal, generating an acknowledge packet by the terminal, and transmitting generated acknowledge packet from the terminal to the computer.

Abstract: Systems and methods are provided for authentication by combining a Reverse Turing Test (RTT) with password-based user authentication protocols to provide improved resistance to brute force attacks. In accordance with one embodiment of the invention, a method is provided for user authentication, the method including receiving a username/password pair associated with a user; requesting one or more responses to a first Reverse Turing Test (RTT); and granting access to the user if a valid response to the first RTT is received and the username/password pair is valid.

Abstract: The invention relates to secured distributed impersonation, for use within systems such as batch system and batch message transaction systems. In one embodiment, a method includes sending a request for credentials of a network account from an originating account associated with an unpublished object to a dispatch associated with a published object. In one embodiment, both the unpublished and the published objects can each be a message queue. The dispatch authenticates the originating account. Upon successful authentication, the network account access emblem is sent to the originating account—that is, the originating account receives the requested credentials, which facilitate the ability to impersonate into the network account.

Abstract: The invention comprises three extensions of the IEEE 802.1Q VLAN bridge model. The first extension is the cryptographic separation of VLANs over trunk links. A LAN segment type referred to as an encapsulated LAN segment is introduced. All frames on such a segment are encapsulated according to an encryption and authentication code scheme. The second extension is the division of a trunk port into inbound and outbound ports. The third extension is a protocol that automatically infers for each outbound port in a bridged VLAN, a set of LAN segment types for the port that minimizes the number of transfers between encapsulated and unencapsulated segments required to transport a frame in the bridged VLAN.

Abstract: A system for preventing a user from interrupting a script launching one or more applications on a computer is provided. The system comprises a script operable to promote launching one or more applications. The system also comprises a security curtain application operable to prevent the user's input from interfering with operation of the script. The system further comprises enabling and disabling the security curtain application based upon one or more triggering events.

Abstract: A wireless home entertainment system consistent with certain embodiments has at least one server having at least one manipulable authentication element thereon, wherein the manipulable authentication element is not a general purpose data entry element. At least one component is in wireless communication with the server. A User Interface is used for selecting an authenticated component to be de-authenticated. A person can cause the server to regard an authenticated component as being de-authenticated by manipulating the authentication element while a component to be de-authenticated is selected using the user interface. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: A multi-identity security environment is created for use in controlling access to resources. The multi-identity security environment enables one process that is spawned by another process to access resources security accessible to the one process, as well as resources security accessible to the another process. The multi-identity security environment includes an identity of the one process and an identity of the another process.

Abstract: A method of facilitating transformation of survey data from being in at least one foreign format used by a survey-tool to being in a desired format may include: receiving instances of foreign data from survey-tools, the foreign data being in foreign format used by the survey-tools, respectively; and appending, to the instances of foreign data, service-keys to identify the service tools which gathered the foreign data, respectively, to produce a data block that includes key-and-foreign-data pairs. Another such method may include: receiving such a data block; culling from the block key-and-foreign-data pairs; and operating upon the pairs to transform respective chunks of foreign data from being in respective foreign formats into being in corresponding desired formats according to corresponding service-keys, respectively.

Abstract: Provided are techniques for monitoring communication packets. A communication packet is received. A communication packet signature of the communication packet is determined. The communication packet signature is compared to one or more site-specific application signatures. In response to determining that the communication packet signature matches at least of the one or more site-specific application signatures, it is determined that the communication packet is to be trusted.

Abstract: A method for suppressing the generation of an event includes checking an in-kernel cache to determine if data relating to a file is within the in-kernel cache. Determining whether the file has been modified since a last time an event was generated for the file where data relating to a particular file is found to be within the in-kernel cache. Suppressing the generation of an event for the file where it is determined that the file has not been modified since the last time an event was generated for the file.

Abstract: Techniques for dynamically altering security criteria used in a file security system are disclosed. The security criteria pertains to keys (or ciphers) used by the file security system to encrypt electronic files to be secured or to decrypt electronic files already secured. The security criteria can, among other things, include keys that are required to gain access to electronic files. Here, the keys can be changed automatically as electronic files transition between different states of a process-driven security policy. The dynamic alteration of security criteria enhances the flexibility and robustness of the security system. In other words, access restrictions on electronic files can be dependent on the state of the process-driven security policy.

Abstract: Various embodiments provide methods and systems that utilize a protocol which enables media content protection by establishing a secure communication channel and, in some embodiments, a secure data channel, between a device such as a computing device running a protected content playback application, and a downstream component such as an associated driver, such as a graphics driver, of an associated display device such as a monitor, flat panel LCD, television and the like.

Abstract: An authorization system is described that includes a first interface, a processing system, and a second interface. The first interface is configured to receive an authorization instruction from an enterprise and receive an authorization request from a user device. The authorization instructions indicate authorization parameters. The user device transfers the authorization request each time the application is selected for execution. The authorization instructions are based on a license obtained by the enterprise for an application and wherein a user device operated by a user has the application. The processing system is configured to process the authorization request and authorization parameters to determine if the execution of the application is authorized. The second interface is configured to transfer an authorized message to the user device if the execution of the application is authorized and transfer an unauthorized message to the user device if the execution of the application is not authorized.